标签：android selinux selinux seandroid selinux 影响
# Input selectors: # isSystemServer (boolean) # user (string) # seinfo (string) # name (string) # path (string) # sebool (string) # isSystemServer=true can only be used once. # An unspecified isSystemServer defaults to false. # An unspecified string selector will match any value. # A user string selector that ends in * will perform a prefix match. # user=_app will match any regular app UID. # user=_isolated will match any isolated service UID. # All specified input selectors in an entry must match (i.e. logical AND). # Matching is case-insensitive. # # Precedence rules: # (1) isSystemServer=true before isSystemServer=false. # (2) Specified user= string before unspecified user= string. # (3) Fixed user= string before user= prefix (i.e. ending in *). # (4) Longer user= prefix before shorter user= prefix. # (5) Specified seinfo= string before unspecified seinfo= string. # (6) Specified name= string before unspecified name= string. # (7) Specified path= string before unspecified path= string. # (8) Specified sebool= string before unspecified sebool= string. # # Outputs: # domain (string) # type (string) # levelFrom (string; one of none, all, app, or user) # level (string) # Only entries that specify domain= will be used for app process labeling. # Only entries that specify type= will be used for app directory labeling. # levelFrom=user is only supported for _app or _isolated UIDs. # levelFrom=app or levelFrom=all is only supported for _app UIDs. # level may be used to specify a fixed level for any UID. # isSystemServer=true domain=system_server user=system domain=system_app type=system_app_data_file user=bluetooth domain=bluetooth type=bluetooth_data_file user=nfc domain=nfc type=nfc_data_file user=radio domain=radio type=radio_data_file user=shared_relro domain=shared_relro user=shell domain=shell type=shell_data_file user=_isolated domain=isolated_app user=_app seinfo=platform domain=platform_app type=app_data_file user=_app domain=untrusted_app type=app_data_file #user=_app seinfo=lenovoapp domain=platform_app type=app_data_file user=_app seinfo=lenovordvr domain=platform_app type=app_data_file user=_app seinfo=lenovordvm domain=platform_app type=app_data_file user=_app seinfo=lenovordvs domain=platform_app type=app_data_file user=_app seinfo=lenovordvp domain=platform_app type=app_data_file user=_app seinfo=lenovopadr domain=platform_app type=app_data_file user=_app seinfo=lenovopadm domain=platform_app type=app_data_file user=_app seinfo=lenovopads domain=platform_app type=app_data_file user=_app seinfo=lenovopadp domain=platform_app type=app_data_file
########################## # property service keys # # net.rmnet u:object_r:net_radio_prop:s0 net.gprs u:object_r:net_radio_prop:s0 net.ppp u:object_r:net_radio_prop:s0 net.qmi u:object_r:net_radio_prop:s0 net.lte u:object_r:net_radio_prop:s0 net.cdma u:object_r:net_radio_prop:s0 net.dns u:object_r:net_radio_prop:s0 sys.usb.config u:object_r:system_radio_prop:s0 ril. u:object_r:radio_prop:s0 gsm. u:object_r:radio_prop:s0 persist.radio u:object_r:radio_prop:s0 net. u:object_r:system_prop:s0 dev. u:object_r:system_prop:s0 runtime. u:object_r:system_prop:s0 hw. u:object_r:system_prop:s0 sys. u:object_r:system_prop:s0 sys.powerctl u:object_r:powerctl_prop:s0 service. u:object_r:system_prop:s0 wlan. u:object_r:system_prop:s0 dhcp. u:object_r:dhcp_prop:s0 dhcp.bt-pan.result u:object_r:pan_result_prop:s0 bluetooth. u:object_r:bluetooth_prop:s0 debug. u:object_r:debug_prop:s0 debug.db. u:object_r:debuggerd_prop:s0 log. u:object_r:shell_prop:s0 service.adb.root u:object_r:shell_prop:s0 service.adb.tcp.port u:object_r:shell_prop:s0 persist.audio. u:object_r:audio_prop:s0 persist.logd. u:object_r:logd_prop:s0 persist.sys. u:object_r:system_prop:s0 persist.service. u:object_r:system_prop:s0 persist.service.bdroid. u:object_r:bluetooth_prop:s0 persist.security. u:object_r:system_prop:s0 # selinux non-persistent properties selinux. u:object_r:security_prop:s0 # default property context * u:object_r:default_prop:s0 # data partition encryption properties vold. u:object_r:vold_prop:s0 crypto. u:object_r:vold_prop:s0 # ro.build.fingerprint is either set in /system/build.prop, or is # set at runtime by system_server. build.fingerprint u:object_r:fingerprint_prop:s0 # ctl properties ctl.bootanim u:object_r:ctl_bootanim_prop:s0 ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.fuse_ u:object_r:ctl_fuse_prop:s0 ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 ctl.ril-daemon u:object_r:ctl_rildaemon_prop:s0 ctl.bugreport u:object_r:ctl_bugreport_prop:s0 ctl.dhcpcd_bt-pan u:object_r:ctl_dhcp_pan_prop:s0 ctl. u:object_r:ctl_default_prop:s0 # NFC properties nfc. u:object_r:nfc_prop:s0 # DOLBY_START dolby.audio u:object_r:audio_prop:s0 dolby. u:object_r:system_prop:s0 # DOLBY_END
.png)
版权声明：本文为博主原创文章，未经博主允许不得转载。
Android [Android L]SEAndroid增强Androd安全性背景概要及带来的影响
标签：android selinux selinux seandroid selinux 影响
原文地址：http://blog.csdn.net/yelangjueqi/article/details/46756341
